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AMC  SPORTS  and  RECREATION  SEMINAR 
June  1972  - Louisville,  Kentucky 


In  June  1972,  the  US  Army  Materiel  Command  sponsored  a Sports  and 
Recreation  Safety  Seminar  in  Louisville,  Kentucky.  The  three-day  seminar, 
hosted  by  the  AMC  Field  Safety  Agency,  was  conducted  in  response  to  the 
rising  AMC  military  injury  and  fatality  toll  associated  with  recreational 
and  athletic  activities.  The  46  attendees  shown  below  represent  a wide 
segment  of  the  safety  professionals  and  special  services  personnel  assigned 
throughout  AMC. 


Forty-Six  Attendees  - US  Army  Sports  and  Recreation  Safety  Seminar 
June  1972  - Louisville,  Kentucky 


The  seminar  was  highlighted  with  presentations  by  guest  speakers 
who  were  well-versed  in  the  safety  aspects  of  sports  and  recreational 
activities.  The  topics  of  each  presentation  and  photographs  of  the 
four  speakers  at  the  podium  are  shown  on  the  adjoining  page. 


• •• 

A free  exchange  of  pertinent  information  and  ideas  was  a discern- 
ible asset  of  this  seminar.  Panel  discussions  generated  active  partici- 
pation of  all  attendees.  The  seminar  was  indeed  a successful  endeavor 
toward  alleviating  a growing  problem  within  AMC. 
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SYSTEM  SAFETY  TESTING 


The  July  issue  of  the  Safety  Digest  also  contained  an  article 
entitled,  "System  Safety  Testing."  In  that  article  the  types  of  tests 
that  are  conducted  during  the  concept  and  development  phases  of  a system 
life  cycle  were  discussed.  In  this  article  we  begin  our  discussion  with 
those  tests  conducted  during  the  production  phase  of  the  life  cycle. 

The  groups  of  tests  identified  collectively  as  "Production  Acceptance 
Tests"  include  preproduction,  initial  production  and  confirmatory  tests. 
Singly  or  collectively,  their  primary  purpose  is  to  validate  the  adequacy 
of  production  hardware.  The  results  of  these  tests  and  the  plans  for  pro- 
curement are  evaluated  at  the  Production  Validation  In-Process  Review. 

The  preproduction  tests  are  engineering  type  tests  of  a preproduction 
model  or  early  production  sample  produced  in  accordance  with  the  procure- 
ment specifications  and  drawings  using  the  same  methods,  material  and 
equipment  as  will  be  used  during  regular  production.  The  purpose  of  the 
test  is  to  verify  production  drawings,  processes  and  materials.  This  test 
is  the  responsibility  of  the  developing  agency  and  may  be  conducted  at  the 
contractor's  facility  or  at  a government  installation.  If  the  preproduc- 
tion test  is  conducted  to  the  exclusion  of  the  initial  production  test, 
the  US  Army  Test  and  Evaluation  Command  (TECOM)  will  conduct  the  test. 

Initial  Production  Tests  (IPI's)  are  tests  of  an  early  item  or  system 
from  the  first  production  run  which  are  used  to  verify  the  adequacy  and 
quality  of  the  materiel  when  manufactured  according  to  the  production 
drawings  and  by  the  mass  production  processes.  The  IPT  will  also  verify 
the  correction  of  deficiencies  found  during  Engineering  Test  (ET)  and 
Expanded  Service  Test  (EST)  which  were  to  have  been  corrected  by  engineer- 
ing change  prior  to  initial  production.  The  IPT  is  the  responsibility  of 
TECOM  and  may  be  conducted  at  the  contractor's  facility  or  at  a government 
installation.  The  test  will  be  conducted  using  performance  tests  similar 
to  those  employed  in  the  ET  and  EST.  Evaluation  of  the  results  of  the  IPT 
will  provide  the  basis  for  the  Production  Validation  In-Process  Review 

(IPR). 

The  system  safety  input  at  this  stage  should  be  the  review  and  approval 
of  all  Engineering  Change  Proposals  (ECP's)  which  affect  system  safety  and 
participation  in  the  Production  Validation  IPR. 

The  testing  program  does  not  stop  at  the  completion  of  the  IPT  but 
continues  on  into  the  operations  and  disposal  phase  of  the  life  cycle. 
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The  Operational  Test  and  Evaluation  (OTE)  consists  of  tests  conducted 
by  the  user,  under  the  direction  of  Headquarters,  Department  of  the  Army, 
of  materiel  systems  and  doctrine,  under  simulated  combat  conditions,  using 
troop  units  equipped  with  production  models  with  the  objectives  of  provid- 
ing input  to  fielding  decision  and  an  evaluation  of  the  overall  system's 
military  worth.  OTE  is  composed  of  Intensified  Confirmatory  Troop  Tests, 
Confirmatory  Tests,  Troop  Tests  and  Field  Evaluation. 

The  Intensified  Confirmatory  Troop  Test  (ICTT)  is  a short  duration 
test  of  early  production  materiel  of  major  weapons  systems.  Insofar  as 
possible,  the  ICTT  will  be  conducted  in  a realistic  tactical  environment 
to  include  simulated  combat  conditions.  Testing  will  include  field 
exercises  and  be  conducted  by  a troop  unit  of  the  type  which  will  be 
equipped  with  the  system  with  personnel  trained  under  the  proposed  train- 
ing package. 

The  ICTT  must  insure  that  maximum  practicable  system  effectiveness  is 
achieved  before  the  weapons  system  is  fully  introduced  into  the  force  and 
that  a basis  is  provided  for  establishing  the  quantity  of  systems  to  be 
procured  and  the  operational  concepts  and  doctrine  are  verified  to  include 
explicit  consideration  of  their  interface  with  other  systems. 

The  Confirmatory  Test  is  an  intensive  user  test  conducted  under  field 
conditions  by  operational  Army  units  equipped  with  early  production  models 
of  high  density  or  major  cost  items.  The  purpose  of  the  test  is  to  obtain 
equipment  performance  experience  which  will  minimize  unexpected  equipment 
failures  in  combat. 

A Troop  Test  is  a test  conducted  in  the  field  for  the  purpose  of 
evaluating  operational  or  organizational  concepts,  doctrine,  tactics  and 
techniques,  or  to  gain  further  information  on  materiel. 

A Field  Evaluation  is  conducted  under  normal  operating  conditions 
over  an  extended  period  of  time  for  the  purpose  of  examining  new  and/or 
revised  doctrine  and  organization.  Field  Evaluations  are  characterized  by 

1.  Absence  of  a scenario. 

2.  Presence  of  realism  over  control. 

3.  Long  duration  test  execution. 

4.  Data  collection  by  independent  observers,  interviews  and  unit 
documentation . 

5.  Extensive  reliance  on  subjective  data. 
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The  system  safety  input  during  this  phase  of  life  cycle  testing  would 
be  to  monitor  test  activity  reports  for  system  safety  deficiencies  and  to 
review  and  recommend  design  changes  for  system  safety  effectiveness. 

These  articles  on  life  cycle  testing  have  not  been  an  attempt  to 
cover  every  type  of  test  that  is  conducted,  but  rather  to  introduce  you  to 
what  is  involved  in  the  way  of  testing  as  an  item  progresses  through  its 
life  cycle.  After  all  tests  have  been  completed,  the  results  of  those 
tests  must  be  tabulated  and  correlated  with  other  test  results  and  then 
reports  prepared.  The  reports  are  then  studied  and  the  performance  of  the 
tested  item,  along  with  many  other  factors,  will  be  weighed  against  the 
specific  requirements.  System  safety  should  be  a definite  part  of  these 
requirements  that  are  evaluated  through  testing. 

# # # # <e 
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TELL  THEM  WHY 


Oscar  W.  Schultz,  Safety  Engineer 
Olin  Corporation 

^^Bad^^^rm^AmmunTtionPlant^^^ 


Reading  a recent  Near  or  Minor  Accident  Report  published  at  our  plant, 

I couldn't  help  but  recall  the  old  cliche,  "It's  always  been  done  this  way!" 
The  report  pointed  out  that  established  practices  are  not  necessarily  safe 
and  are  sometimes  devised  as  personal  conveniences.  Work  habits  or 
patterns  sometime  develop  through  the  "trial  and  error"  method.  If 
Employee  A performs  a certain  task  in  a specific  way  for  a period  of  time 
without  injury  or  causing  damage,  then  Employee  B must  assume  the  method 
is  safe.  Right?  Wrong! 

In  the  business  of  manufacturing  propellants,  we  cannot  afford  assump- 
tions. Each  function  within  an  operation  is  studied,  evaluated,  tested  and 
retested.  After  the  procedure  has  been  determined  to  be  the  safest  known, 
it  is  then  published  in  the  form  of  a Standing  Operating  Procedure  (SOP). 
Each  employee  is  trained  in  accordance  with  the  applicable  SOP  for  his  job, 
and  a copy  is  posted  in  the  bay  or  room  where  the  operation  is  performed 
for  ready  reference. 

Sounds  foolproof  doesn't  it?  It  isn't!  Each  employee  is  capable  of 
thinking  for  himself.  If  the  procedure  requires  only  one  grain  of  propel- 
lant to  be  carried  from  one  point  to  another  each  time,  it  would  seem 
natural  that  if  two  grains  were  carried  each  time,  only  half  the  trips 
would  be  made.  Simple  isn't  it?  The  procedure  does  not  explain  why  only 
one  grain  is  to  be  carried,  although  the  reasons  may  be  many  --  reducing 
the  possibility  of  dropping  a grain,  friction,  exposure,  and  various  other 
reasons . 

It  is  imperative  that  each  employee  is  not  only  taught  the  rule,  but 
that  he  completely  understands  the  reason  for  the  rule.  Periodically  the 
rule  must  be  re-emphasized.  Then,  and  then  only,  will  the  possibility  of 
deviation  from  the  SOP  be  eliminated. 


* # » e * 
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PILOT  E-R-R-O-R 


Major  Donald  Shanan  G 
Chief,  Aviation  Division,  HISA,  MICQM 


Maybe  today,  we  can  take  a lesson  from  the  tale  of  Daedalus, 
who  made  a pair  of  wings  for  himself  and  for  his  son,  Icarus,  in 
order  to  escape  from  a prison  on  the  island  of  Crete.  Icarus, 
according  to  the  legend,  flew  too  close  to  the  sun,  which  melted 
the  wax  with  which  the  wings  were  fastened  to  his  body,  and  he 
fell  into  the  sea.  Daedalus  succeeded  in  reaching  Sicily.  Per- 
haps if  Daedalus  had  properly  trained  his  son  or  had  made  him 
more  familiar  with  the  wings,  his  son  may  also  have  reached 
Sicily.  If  an  accident  board  today  had  investigated  the  acci- 
dent, what  would  the  findings  have  been;  pilot  error,  lack  of 
proper  training,  or  improper  command  emphasis? 


How  many  Aviation  units  in  the  US  Army  today  have  a pro- 
per training,  standardization,  and  safety  program?  How  much 
command  emphasis  is  actually  placed  on  training,  standardiza- 
tion, and  the  aviation  safety  program? 


When  an  aviator  graduates  from  flight  school,  he  possesses 
a high  degree  of  proficiency.  He  has  the  basic  knowledge  re- 
quired of  an  Army  aviator,  but  only  time,  and  the  experience 
he  gains  from  it,  will  teach  him  to  handle  this  aircraft  safely 
under  all  conditions.  This  training  has  to  be  supplemented 
periodically  by  standardization  and  training  in  each  unit  to 
which  he  is  assigned.  Army  Regulations  require  an  Aviator  to 
fly  a minimum  of  80  hours  annually,  of  which  15  hours  must  be 
during  darkness,  20  hours  simulated  instruments  or  actual  in- 
struments, and  20  hours  must  be  cross  country  flight.  To  fur- 
ther reduce  the  chances  of  an  accident,  an  aviator  is  considered 
to  be  current,  only  if  he  has  flown  the  type  and  model  aircraft 
within  the  preceding  30  days,  or  if  he  has  500  hours  in  the 
aircraft  category  as  pilot  or  instructor  pilot,  and  he  has  flown 
the  aircraft  in  the  preceding  six  (6 ) months.  Even  if  the  fly- 
ing time  is  utilized  for  training,  it  is  not  enough  to  maintain 
proficiency,  only  currency.  Therefore,  each  unit  must  have  a 
properly  implemented  training  and  standardization  program  with 
proper  command  emphasis. 

Now,  let’s  take  a look  at  some  of  the  necessary  items  that 
go  into  a good  program. 

First  of  all,  command  emphasis  has  to  be  placed  on  the  pro- 
gram. The  commander  does  not  have  the  time  to  personnally  plan 
the  program  but  must  delegate  the  responsibility.  As  in  any 
unit,  he  is  responsible  for  all  his  unit  does  or  fails  to  do; 
therefore,  he  must  closely  supervise.  Many  accidents  are  the 
result  of  inadequate  direction  and  control  in  the  chain  of 
command. 
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The  second  necessary  item  is  unit  standardization.  Stand- 
ardization, as  defined  by  Webster’s  dictionary,  is  "cause  to 
be  without  variation  or  irregularities."  If  an  aviation  unit 
is  to  be  effective,  it  needs  a standardization  board  with  the 
unit  commander  as  chairman.  The  board  should  standardize  all 
procedures  pertaining  to  aircraft  operations  including  such 
areas  as  preflight  and  cockpit  procedure,  basic  and  advanced 
flight  maneuvers,  ground  operations,  instrument  flight  proce- 
dures, etc.  Membership  should  be  composed  of  the  most  highly 
experienced  and  qualified  aviators,  not  necessarily  the  ones 
with  the  most  flying  time.  It  is  the  board’s  responsibility 
to  standardize  the  unit’s  instructor  pilots,  and  to  conduct 
evaluation  check  rides  with  each  member  of  the  unit. 

Standardization  begins  the  minute  an  aviator  is  assigned 
to  the  unit  and  continues  during  the  aviator's  stay  with  the 
unit.  Many  aviation  units  conduct  the  training  and  the  stand- 
ardization as  the  need  arises.  Too  many  do  not  conduct  the 
training  as  standardization;  they  conduct  it  merely  as  aviation 
currency.  This  usually  happens  when  the  need  for  an  aviator  to 
fly  a mission  arises  and  either  the  unit  doesn’t  have  a proper- 
ly implemented  standardization  program  or  no  one  in  the  unit 
wants  the  mission. 

The  latter  will  not  be  discussed  because  it  is  felt  this  is 
going  too  deep  into  the  command  aspect  of  the  unit.  Each  avia- 
tor should  receive  an  orientation  and  interview  by  the  stand- 
ardization office  and  a flight  records  check  for  qualifications , 
and  past  training.  The  records  may  very  well  show  weakness 
prior  to  the  individual  entering  an  aircraft. A reading  file  and 
a unit  SOP  should  be  maintained  to  orient  the  new  aviator  on 
unit  policy.  A visual  flight  evaluation  check  should  be  sched- 
uled and  conducted  in  each  type  of  aircraft  the  unit  has  assign- 
ed, in  which  the  new  pilot  is  qualified.  On  these  flights,  an 
evaluation  can  be  made  as  to  past  training  and  proficiency.  If 
the  individual  lacks  proficiency  in  an  area,  the  training  should 
be  continued  until  the  required  standards  are  met.  Periodically, 
flight  check  rides  should  be  conducted  with  each  member  of  the 
standardization  board.  The  standardization  can  not  stop  with 
just  a visual  flight  check.  It  must  be  carried  on  further  to  an 
instrument  flight  check.  This  can  be  started  by  first  requiring 
refresher  training  in  the  link.  Much  can  be  accomplished  with 
less  funds  expended  by  utilizing  the  link.  After  a successful 
link  training  program,  the  aviator  is  ready  to  put  the  training 
to  good  use  in  the  aircraft.  Now  we  have  an  aviator  who  is 
partially  prepared  to  fly  our  missions. 

The  third  item,  and  perhaps  the  most  important,  is  safety. 
Safety,  as  has  been  stated  many  times,  is  the  business  of  every- 
one and  not  just  that  of  the  safety  officer.  The  safety  program 
should  be  designed  to  prevent  accidents.  It  is  an  inherent 
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function  of  command.  Many  commanders  breathe  a sigh  of  relief 
and  feel  their  safety  problems  are  solved  when  a school  trained 
aviation  safety  officer  is  assigned  the  unit.  What  do  they  use 
him  for?  Was  his  primary  and  only  duty  that  as  safety  officer 
or  was  he  assigned  for  additional  duties?  He  should  be  used 
to  assist  and  advise  the  commander  on  all  safety  matters. 

One  unnamed  unit  had  a school  trained  safety  officer  who 
had  the  following  duties.  He  was  standardization  officer, 
chairman  of  the  safety  council,  weight  and  balance  officer  and 
the  only  instructor  pilot  in  two  types  of  aircraft  the  unit 
possessed.  Granted  he  was  an  excellent  pilot  and  instructor 
pilot,  but  he  did  not  have  the  time  to  devote  to  safety.  Some- 
thing had  to  be  sacrificed  in  order  to  accomplish  all  his 
duties.  The  unit  had  one  major  accident  and  three  minor  acci- 
dents in  a period  of  four  months.  One  was  due  to  metal  fatigue 
but  three  were  due  to  pilot  error.  The  first  of  the  three  re- 
sulted in  a pilot  taxiing  into  an  unmarked  culvert  at  night. 

The  second  was  landing  in  an  outlying  strip  that  had  not  been 
checked  by  the  safety  officer  for  six  weeks.  The  strip  was  con- 
sidered to  be  open  and  it  was  listed  as  open.  The  third  accident 
was  due  to  a parachutist  getting  hung  on  the  horizontal  stabiliz- 
er. The  parachutist  pulled  his  reserve  and  he  consequently 
almost  pulled  the  horizontal  stabilizer  off  the  aircraft.  These 
three  accidents  were  listed  as  pilot  error.  But  were  they? 

Now  look  at  what  the  safety  officer  should  have  been  doing 
in  the  safety  field  rather  than  all  his  additional  duties.  First 
of  all,  the  unit  should  have  a monthly  meeting.  Varied  topics 
should  be  discussed.  As  in  the  third  accident,  if  the  correct 
procedure  for  parachutists  had  been  discussed  at  the  safety  meet- 
ing, this  accident  probably  would  not  have  occurred.  There  are 
many  subjects  to  be  covered  at  these  meetings,  one  of  which 
should  be  a quick  weather  forecast  for  the  following  month.  An 
excellent  list  of  items  is  covered  in  the  September  1965  issue 
of  the  Army  Aviation  Digest. 

The  safety  officer  should  make  a monthly  survey  of  all  of 
the  field  strips  that  come  under  his  jurisdiction.  There  are 
times  when  it  may  be  necessary  to  do  this  at  more  frequent  in- 
tervals. Each  danger  area  should  be  physically  marked  at  this 
time.  A list  of  all  strips  should  be  maintained  with  the . status 
of  each  annotated.  These  should  be  brought  to  the  attention  of 
the  aviators  at  the  monthly  safety  meeting.  The  main  airfield 
should  be  surveyed  for  discrepancies  at  least  weekly.  This  is 
the  field  that  is  going  to  receive  the  bulk  of  the  traffic. 
Therefore,  the'  possibility  of  an  accident  is  greater.  If  a 
survey  of  the  main  airfield  had  been  made,  the  first  accident 
could  have  been  avoided.  These  are  but  a few  of  the  duties  of 
the  safety  officer,  but  it  is  readily  seen  that  he  has  his  hands 
full  with  the  duties  as  safety  officer  rather  than  adding  addi- 
tional duties. 
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Now  we  get  down  to  the  commander.  Take  an  example  of  the 
unit  that  has  an  aircraft  that  was  designed  to  carry  four 
passengers.  The  unit  flies  it  this  way  until  a weight  and 
balance  is  computed  for  the  aircraft.  It  is  found  that  the 
aircraft  is  500  pounds  over  gross  weight  with  four  passengers. 

The  commander  states  that  it  is  up  to  the  pilot  to  decide  if 
he  will  fly  in  the  present  configuration.  But  what  happens 
if  one  of  the  aircraft  is  involved  in  an  accident?  Then  it 
becomes  pilot  error  since  the  pilots  were  aware  of  the  over- 
weight condition.  Wouldn’t  it  have  been  simpler  to  flatly 
state  the  aircraft  would  not  be  flown  under  any  conditions, 
except  emergency,  with  four  persons  aboard?  How  much  of  the 
common  phrase  "pilot  error"  can  be  attributed  to  the  commander? 

If  the  unit  does  not  have  a proper  standardization  program,  is 
this  due  to  a deficiency  on  the  part  of  the  aviator?  Partially 
it  is  because  each  aviator  should  really  strive  in  order  to 
maintain  proficiency  rather  than  currency.  But  the  commander 
should  place  proper  emphasis  on  his  program.  This  can  be  car- 
ried through  the  safety  program  also.  The  standardization  and 
safety  program  go  hand  in  hand.  They  both  are  designed  to  get 
the  maximum  use  of  Army  Aircraft  with  minimum  cost. 

In  the  tale  of  Daedalus  and  his  son  Icarus,  we  can  see  that, 
if  Daedalus  had  not  been  in  a hurry  to  escape,  he  could  have 
trained  his  son  to  use  the  wings.  With  a few  flights  for  stand- 
ardization, Icarus  may  have  joined  his  father  in  Sicily.  If 
Daedalus  had  placed  command  emphasis  on  the  training  ancl  inform- 
ed his  son  of  the  danger  of  flying  too  close  to  the  sun,  his  son 
may  have  reached  Sicily.  So  with  command  emphasis  on  the  unit 
standardization  program  and  the  unit  safety  program  each  aviation 
unit  in  the  US  Army  can  provide  a more  efficient  service  for  our 
fellow  soldiers. 


This  article  was  written  by  Major  Shanan  in  January  19  72  . 

Its  publication  is,  however,  posthumous,  for  he  suffered  a fatal 
heart  attack  on  23  April  1972.  The  quality  of  his  leadership 
and  personal  dedication  will  be  sorely  missed. 

Kf  $ # # « 


NSC  AWARD  OF  HONOR  WINNERS 

Three  activities  of  the  US  Army  Electronics  Command  have  quali- 
fied for  the  National  Safety  Council  Award  of  Honor.  The 
Directorate  of  Procurement  and  Production  operated  15,084,588 
man-hours  without  a disabling  injury  from  November  29,  1968  to 
May  31,  1972.  ECOM/Philadelphia  operated  12,344,684  man-hours 
without  a disabling  injury  from  October  22,  1968  to  May  31,  1972. 
Directorate  of  Maintenance  operated  11,  192,  898  man-hours  with- 
out a disabling  injury  from  June  18,  1968  to  May  31,  1972. 
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SYSTEM  SAFETY  APPLICATION 


AMC  Summary  of  the  System  Safety  philosophy” 

Although  a number  of  articles  have  been  written  on  System  Safety  and 
various  segments  of  its  application,  this  particular  series  will  collect 
that  which  has  gone  before  to  set  the  stage  for  the  forthcoming  revision 
of  AMC  Pamphlet  385-23,  System  Safety.  This  pamphlet  has  been  sent  to 
all  major  activities  for  comment,  therefore,  by  the  time  you  read  this 
article  you  will  have  some  insight  into  the  extent  of  its  coverage.  This 
series  will  explore  various  facets  of  the  discipline  and  provide  insight 
into  what  is  considered  important  for  the  long  term  improvement  in  the 
quality  of  safety  in  materiel  introduced  into  the  Army  inventory. 

Once  everyone  understands  what  is  intended  by  System  Safety  Engineering, 
as  opposed  to  interpreting  obscure  treatises  on  the  subject,  progress  will 
be  made  toward  actual  prevention  of  the  problems  that  always  seem  to  appear 
when  they  are  least  desired  - after  materiel  has  been  issued.  Although 
perhaps  redundant,  a new  definition  of  System  Safety  Engineering  is  needed 
to  provide  a basis  for  this  and  subsequent  articles. 

"System  Safety  Engineering  is  the  application  of  analytical 
techniques  and  engineering  principles  to  materiel  design  and 
development  to  insure  that  the  materiel  does  not  create  stresses 
beyond  human  capabilities  or  degrade  mission  effectiveness  by 
exposing  personnel  or  equipment  to  hazards." 

"HOW-TO-DO- IT”  GUIDELINES 

Now  that  we  have  a definition,  we  need  a specific  set  of  guidelines 
that  tell  one  "how  to  do  it."  These  can  be  stated  in  five  categories: 

1.  Define  acceptable  levels  of  risk  for  the  equipment.  Everyone 
should  recognize  that  the  acceptance  of  risk  for  a weapon  will  be  higher 
than  for  a radio.  The  acceptable  risk,  however,  for  each  system  should 
be  minimized  based  on  the  intended  purpose  of  that  equipment. 

2.  Thoroughly  analyze  and  evaluate  system  design  to  insure  that  pot- 
entially hazardous  objects  or  events  within  the  system  are  eliminated  or 
controlled.  One  should  not,  however,  begin  by  instituting  controls  instead 
of  making  the  design  stand  on  its  own,  safetywise,  without  them. 

3.  Test  the  materiel  to  the  standards  defined  for  the  system. 

Assure  during  testing  that  the  safety  designs  and  procedures  actually 
produce  the  desired  result  - elimination  of  hazards.  For  example,  if  a 
switch  is  supposed  to  shut  off  all  power  to  a system  when  an  undesired 
event  occurs,  subject  the  system  to  that  event  and  see  if  the  switch 
works  properly.  Of  course,  the  switch  and  other  system  components  must 
have  already  been  determined  adequate;  otherwise,  the  cause  of  any  failure 
will  probably  be  obscured  by  multiple  faults. 

4.  When  equipment  is  reprocured  on  a new  contract,  or  when  similar 
equipment  is  designed  to  meet  new  requirements,  use  the  experience  gained 
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previously  to  avoid  including  features  that  have  been  proven  undesirable. 
Always  decrease,  or  at  least  maintain,  the  acceptable  level  of  risk  when 
an  item  is  designed  to  replace  another.  Never  allow  a replacement  or 
new  system  to  be  developed  and  fielded  that  degrades  the  level  of  safety 
in  the  existing  system. 

5.  Recognize  that  every  possible  hazard  cannot  be  eliminated  by 
the  developer,  but  that  the  operator  (as  a part  of  the  system)  also  has 
a responsibility  for  safety.  There  is  a limit  to  the  number  of  re- 
straining devices  that  are  practical  for  preventing  injury  or  damage  in 
many  cases.  For  example,  a ladder  is  designed  to  be  stable  under  loads 
up  to  £00  lbs;  but,  if  a 15>0  lb  man  stands  on  the  top  step  and  tries  to 
work  beyond  his  reach,  he  will  most  likely  fall  off.  There  is  little 
that  can  be  done  by  the  designer  to  prevent  this  kind  of  accident. 

WHAT  EACH  OF  US  DO 

Many  engineers  and  managers  contend  that  system  safety  has  been 
applied  since  the  beginning  of  time.  Abstractly,  in  one  form  or  another, 
this  probably  is  true,  but  it  hasn’t  always  been  properly  identified  or 
applied.  Fveryone  knows  that  an  aircraft  must  remain  airborne  from  take- 
off to  landing;  likewise,  everyone  knows  that  ammunition  must  damage  only 
the  target.  These  things  are  inherent  in  the  successful  operation  of 
aircraft  and  the  delivery  of  ammunition.  It  is  how  one  provides  the 
"success  factor”  that  is  important. 

Early  design  engineers,  such  as  the  Wright  brothers,  depended  almost 
entirely  on  their  own  insight  and  experience  to  provide  for  a successful 
design.  If  you've  watched  the  late-late  show,  occasionally,  you  will  have 
seen  some  of  these  early  designs  that  were  not  quite  as  successful.  The 
designer  of  today  is  also  influenced  by  his  previous  experience,  but  that 
is  not  enough  to  assure  that  his  design  will  perform  as  safely  and  success 
fully  as  he  intended.  Trial  and  error  methods  will  no  longer  suffice  for 
today's  wonder -machines  that  are  expected  to  perform  safely  the  first  time 
This  requires  a team  effort,  using  a systems  approach  to  safety. 

Since  one  may  be  led  to  believe  that  each  command  entity  operates 
within  its  own  particular  functional  responsibilities  without  recourse  to 
another,  we  must  emphasize  that  proper  interfacing  is  necessary.  We 
develop,  manufacture,  and  process  many  different  commodities.  It  is 
essential  that  any  subsystem  or  component  that  is  the  responsibility  of 
one  command,  but  used  in  another's  system  be  adequately  reviewed  to  insure 
that  incompatibilities  will  not  exist  in  the  operational  system.  Not  only 
must  the  equipment  interface  properly,  the  commands  must  also  work  well 
together  to  insure  success.  Within  each  command,  laboratory,  center,  or 
depot  the  good  system  safety  organization  must  also  interface  with  nearly 
all  other  organizational  elements,  e.g.,  maintenance,  Quality  assurance, 
suoply,  research  and  development,  and  sometimes  the  obscure,  but  important 
janitor. 

It  is  also  important  that  the  individual  pieces  of  the  system  safety 
pattern  fit  together,  so  as  not  to  form  too  puzzling  an  effect.  Each  of 
our  safety  offices  perform  a vital  part  of  the  safety  engineering  effort. 
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Char  inputs  and  responsibilities  depend  on  what  position  we  occupy  in  the 
chain -of -command  and  in  the  life  cycle.  In  general,  here  is  what  each 
of  us  do : 1 

Headquarters,  AMC,  Safety  Office 

1.  Your  Headquarters,  AMC,  Safety  Office  is  the  focal  point  for  all 
policy,  criteria,  and  basic  guidance  for  activities  within  the  com  and. 

It  participates  early  in  the  life  cycle  and  assures  that  the  broad  qual- 
itative safety  requirements  are  included  in  Materiel  Need  (MN)  and  other 
system  requirements  documents.  At  appropriate  points  throughout  the  life 
cycle,  it  provides  safety  criteria  and  conducts  studies  in  specialized 
areas,  e.g. , nuclear  and  chemical  weapons,  and  reactors.  It  also  acts  as 
approval  authority  for  materiel  release  actions  and  as  resolving  authority 
when  disputes  arise  between  AMC  elements  concerning  safety. 


Commodity  Commands 


2.  The  commodity  commands  are  the  "work  horses"  of  the  system  safety 
effort,  since  they  have  the  primary  responsibili tv  for  development  and  prod- 
uction of  major  systems  and  other  equipment.  It  is  their  safety  offices 
that  must  insure  that  safety  features  are  incorporated  into  the  materiel 
and  procedures.  They  must  scrutinize  contracts  for  adequate  safety  req- 
uirements and  insure  that  statements  of1  work  contain  the  specific  tasks 
necessary  for  insuring  that  the  effort  is  actually  accomplished.  Their 
review  of  system  documentation  must  be  more  detailed  than  that  of  the  AMC 
safety  office,  for  they  are  more  in  a position  to  directly  influence 
system  design.  With  responsibilities  such  as  these,  they  must  at  all  times 
have  people  intimately  engaged  in  the  function  of  insuring  that  safety 
criteria  are  included  where  necessary.  Blanket  directives  which  state 
that  such-and-such  directorate  is  responsible  for  system  safety  are  not 
adequate.  Experience  has  shown  that  such  directives  tend  to  be  ignored 
in  the  fond  hope  that  someone  else  will  take  care  of  the  task.  A good 
directive  specifically  defines  the  work  and  identifies  the  functional 
branch  within  that  directorate  that  has  the  responsibility.  Within  that 
branch,  the  operating  procedures  must  also  identify  the  individual  who  is 
the  last  element  in  the  chain. 

Research  and  Development  Centers 


3.  Our  research  and  development  centers  have  peculiar  problems,  since 
in  some  cases  the  center  is  located  away  from  the  commodity  command  Head- 
quarters by  considerable  distance.  The  safety  offices  at  the  centers  have 
a dual  responsibility  - industrial  safety  (the  day-to-day,  hard-hat-hard- 
shoe  activities)  and  system  safety.  Problems  in  accomplishing  system 
safety  respbnsibilities  can  be  avoided  by  assigning  safety  engineering 
talent  at  the  center.  These  safety  engineers  must  rely  principally  an  the 
command  office  for  guidance  and  direction,  but  should  have  authority 
adequate  to  accomplish  the  tasks  required.  Their  job  is  similar  to  that 
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of  the  commodity  command  safety  engineer;  but,  because  of  their  dual  roles 
and  normally  smaller  staff,  is  probably  more  difficult. 

Basic  Research  and  Development  Pogroms 

4.  The  separate  laboratories  have  the  responsibility  for  basic 
research  and  development  of  some  end  items.  In  the  basic  research  program, 
acquisition  of  safety  knowledge  is  essential.  In  development  proorams,  the 
laboratory  safety  office  has  the  same  responsibilities  and  should  do  the 
same  things  as  a commodity  command  safety  office.  The  laboratories  are 
similar  to  the  R&D  centers,  for  in  addition  to  their  system  safety  functions, 
they  are  also  responsible  for  laboratory  safety  practices  arri  industrial 
safety  on  a day-to-day  basis. 

Test  and  Evaluation  Command  (TECOM) 


5.  The  Test  and  Evaluation  Command  (TECOM),  even  though  downstream  in 
the  development  effort,  has  the  great  responsibility  for  verifying  the  safety 
of  the  product  (see  also  the  companion  article  on  System  Safety  Testing). 

They  are  an  independent  test  agency,  however,  must  depend  on  the  developers 
for  statements  of  the  potential  safety  hazards  which  may  be  encountered 
during  testing.  This  may  sound  as  if  all  the  safety  engineering  efforts 
discussed  previously  have  been  to  no  avail,  however,  to  adequately  test 
an  item,  TECOM  must  know  what  to  expect.  Accordingly,  AMCR  385-12  (latest 
issue  dated  29  Jun  72)  has  evolved  over  the  years  into  an  orderly  method 
of  providing  them  with  such  information  in  the  form  of  Safety  Statements 
which  are  required  before  TECOM  begins  testing.  If  the  developer  believes 
that  his  item  is  totally  safe,  he  must  justify  that  position  with  technical 
data.  Otherwise,  the  safety  statement  becomes  just  another  paper  exercise 
of  little  value.  It  is  frustrating  to  a test  officer  to  receive  a safe 
billing  on  an  item  and  then  find  it  disintegrating  before  his  eyes.  This  is 
an  exaggeration  of  what  haopens,  although  similar  events  have  occurred. 
Hopefully,  none  will  occur  in  the  future. 


DEPOTS  --  Big  Stake  in  Safety  System 


6.  The  Depots  see  materiel  longer  than  most  other  activities  since 
they  receive,  store,  issue,  maintain,  modify,  rebuild,  and  dispose  of  it. 
The  depot  safety  managers  stake  in  system  safety  (within  his  existing 
safety  program)  includes  managing  his  affairs  so  that  he  can: 

a.  Provide  an  evaluation  and  insure  proper  safety  classification 
of  equipment  improvement  recommendations  initiated  by  the  depot.  These  are 
usually  an  outgrowth  of  depot  incidents  or  studies  which  reveal  materiel 
deficiencies,  or  a need  for  improvement. 


b.  Assure  that  modification  work  orders  receive  adequate  eval- 
uation to  determine  precautions  to  be  taken  during  their  application. 
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c.  Apply  appropriate  system  safety  analyses  to  the  evaluation 
of  standing  operating  procedures,  accident/incident  investigations,  local 
engineering  projects,  amnunitd on/explosives  operations,  maintenance/ 
rebuild  facilities  and  processes,  and  many  more. 

d.  Establish  and  assure  inclusion  of  safety  requirements  in 
specifications  and  procurement  requests  for  supplies,  tools,  equipment, 
and/or  services  to  be  secured  locally. 

e.  Evaluate  proposed  test  programs  on  the  installation  to  insure 
that  safety  will  not  be  compromised. 

Item  c,  above,  may  pose  some  difficulty  in  determining  just  what 
constitutes  "system  safety  analyses"  at  a depot.  It  is  the  application  of 
the  same  analytical  techninues  used  bv  the  design  engineer  in  quite 
different  situations.  In  its  simplest  form,  system  safety  analysis  provides 
the  ability  to  discover  potential  accident  situations  and  causes  that 
might  be  missed  if  less  detailed  techniques  had  been  used.  System  safety 
analysis  technioues  should  be  used  for  evaluating  operations  involving  new 
processes  or  common  processes  that  have  a high  hazard  potential,  such  as 
explosives,  chemicals,  and  the  like.  The  specific  technioues  will  vary; 
however,  the  Fault  Tree  and  failure  Mode  and  Effect  analyses  can  be  used 
to  good  advantage.  It  is  necessary  that  the  engineer  choose  the  technique 
that  will  best  fit  the  situation.  There  are  times  when  use  of  a complex 
technique  ray  take  more  time  and  resources  than  the  process  which  is  being 
analyzed;  in  which  case  a simple  review  will  be  all  that  is  needed. 

In  this  article  we  have  provided  a summary  of  the  System  Safety 
philosophy  as  viewed  within  AMC  today.  Without  a doubt,  this  concept 
will  change  as  political  conditions,  budgetary  c one erns,  and  the  people 
involved  change.  No  single  agency  has  the  perfect  solution  to  any  of 
our  common  problems.  It  takes  a totally  integrated,  continuing  team 
effort  to  achieve  success  in  this  area.  Later  articles  will  discuss  in 
more  detail  other  items  which  influence  the  quality  of  the  end  items 
produced  by  AMC. 


Some  Future  Articles 

The  System  Safety  Process  as  a concept. 


Use  of  Government  furnished  property  and  commercially  or  foreign 
developed  equipment  as  components  of  Army  systems,  and  who  is  responsible 
for  safety  in  such  programs. 

Configuration  management  and  safety  milestones  within  the  life 
cycle  of  materiel  acquisition. 


System  Safety  Analysis  techniques. 


System  Safety  Program  management,  including  System  Safety 
Program  Plans. 
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Two  contractor  employees  were  assigned  the  task  of  erecting  cribbing 
(wire  fencing)  adjacent  to  an  office  located  between  the  machine  shop  and 
tool  room  area.  The  area  to  be  fenced  in  was  approximately  8'  X 20',  and 
the  design  called  for  a single  door  entrance. 


The  two  employees  obtained  a flat  steel  mesh  pallet  which  had  plywood 
bolted  to  the  surface  to  prevent  the  plywood  from  sliding  off.  (This  type 
platform  was  made  to  be  used  for  another  purpose.)  They  returned  to  their 
work  area  and  used  the  modified  pallet  as  a platform,  lifted  by  a fork- 
lift. 


One  of  the  men  operated  the  fork-lift,  and  the  other  was  aboard  the 
raised  platform  to  place  a header  support  of  2"  X 2"  X 10"  (weight  35-40 
pounds)  angle  iron  over  the  space  where  the  door  was  to  be.  The  angle 
iron  was  lying  on  the  platform  and  the  man  bent  over  to  pick  it  up.  When 
he  had  the  iron  about  two  feet  off  the  platform,  his  knees  buckled,  and  he 
pitched  forward  and  fell  head  first  (approximately  feet)  to  the  ground. 
His  fall  resulted  in  a fractured  skull,  and  he  is  expected  to  lose  four 
months  work. 

The  employee  who  fell  was  64  years  old  and  there  is  a possibility  he 
may  have  had  a stroke  or  a dizzy  spell,  or  that  he  simply  lost  his  balance. 

Use  of  this  type  platform  has  always  been  prohibited,  and  the  use  of 
a basket-type  pallet  is  required.  However,  the  operator  of  the  fork-lift 
was  under  the  impression  that  the  type  of  pallet  they  used  was  always  used 
for  "cribbing  operations." 

To  prevent  recurrence  of  such  an  accident,  all  maintenance  super- 
visors were  reinstructed  on  rules,  regulations  and  safe  practices  in  main- 
tenance and  construction  operations. 
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A carpenter  with  more  than  25  years  of  service  was  assigned  to  con- 
struct small  plywood  cabinets  containing  several  shelves. 

During  the  course  of  cutting  and  fitting  the  shelves,  he  acquired  a 
plywood  sliver  in  the  palm  of  his  left  hand.  He  reported  to  the  Post 
Health  Clinic,  was  treated,  and  returned  to  work. 

The  following  day  the  employee  returned  to  the  clinic  and  was  trans- 
ferred to  a local  hospital,  as  an  infection  had  developed  in  the  palm  of 
his  left  hand.  He  was  admitted  and  a plywood  splinter  was  discovered  to 
be  still  in  his  hand.  It  was  surgically  removed. 

Due  to  rapid  development  of  the  infection,  preliminary  medical 
diagnosis  indicated  that  the  employee  may  have  been  allergic  to  materials 
used  in  the  plywood  laminating  process. 

Other  contributing  factors  to  the  injury  were  a rough  edge  on  the 
plywood,  and  apparent  inattention  to  the  condition  of  the  material  being 
handled . 

A professional  determination  of  the  employee's  suspected  allergy  will 
be  made,  and  gloves  will  be  worn  while  handling  material  not  involving  the 
use  of  power  tools. 

* * # * * 


Another  FALL— Another  Injury 


A contractor  employee  was  stacking  pallet  runners  for  105mm  pallets 
on  the  loading  dock.  The  employee  had  placed  a pallet  approximately  one 
foot  from  the  edge  of  the  dock,  and  pallet  runners  were  then  placed  on  the 
pallet. 

The  employee  fell  off  the  edge  of  the  dock,  approximately  five  feet 
onto  a railroad  track  bed.  The  exact  cause  of  the  fall  was  unknown.  It 
was  speculated  that  she  tripped  or  stepped  backwards  off  the  dock,  and  it 
is  thought  possible  that  she  lost  her  sense  of  balance.  She  was  working 
alone  at  the  time;  therefore,  there  were  no  witnesses  available.  A truck 
driver  working  approximately  200  feet  away  heard  her  scream,  and  went  to 
her  assistance. 

She  sustained  a laceration  above  the  left  eye,  a fractured  rib  and 
compression  fractures  of  two  vertebrae  as  a result  of  her  fall.  She  is 
expected  to  be  off  the  job  for  at  least  six  weeks. 
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Contributing  factors  included  the  employee's  working  too  near  the 
edge  of  the  dock,  and  her  being  new  on  the  assignment.  The  safety  chain 
guards  had  been  removed  from  the  dock. 


An  emergency  Equipment  Improvement  Report  was  submitted,  and  safety 
chains  have  been  installed  on  the  dock  to  prevent  recurrence  of  such  an 
incident . 

VwwwVVc 


—and  FALLS  in  the  OFFICE,  too 


The  most  common  accidents  in  an  office  are  "falls."  Three  that 
occurred  in  a recent  month  are  described  below.  Although  all  three  em- 
ployees were  cited  as  being  inattentive,  two  of  the  accidents  indicated  a 
lack  of  proper  maintenance. 


- A key  punch  operator  stood  up  to  load  her  machine  with  blank 
cards.  When  she  attempted  to  sit  down,  she  misjudged  the  position  of  her 
chair  and  sat  down  on  the  edge  of  it.  The  chair  rolled  back  and  she  fell 
to  the  floor  in  a sitting  position,  resulting  in  a herniated  disc.  In- 
attention on  the  part  of  the  employee  was  cited  as  the  cause  of  the  acci- 
dent . 


- An  employee  had  gone  to  the  Post  Publications  Office  to  pick  up 
some  forms.  When  he  walked  down  the  steps  as  he  left  the  building,  he 
tripped  on  the  last  step,  fell  and  fractured  his  right  foot.  This  em- 
ployee was  also  considered  to  be  inattentive,  but  additional  factors  as 
follow  were  also  noted: 

1.  The  rise  on  the  steps  varied  between  6"  and  7%". 

2.  The  nose  of  each  of  the  wooden  steps  was  not  covered  with 
any  non-slip  material. 

3.  The  landing  of  the  stairs  was  composed  of  a large  uneven 
rock  and  dirt  base. 

4.  The  stairs  were  in  need  of  maintenance,  such  as  painting. 

- Another  employee  was  walking  down  the  corridor  toward  her  office. 
As  she  passed  a soft  drink  machine,  she  slipped  and  fell  forward,  bruising 
her  right  knee  and  elbow.  Although  shejtoOjWas  considered  inattentive, 
broken  glass  and  some  liquid  was  on  the  floor  where  she  fell. 

# * # # # 
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DESTRUCTION  FURNACE  FIRE 


An  explosives  operator  was  assigned  to  destruction  of  scrap  ammunition 
by  burning  and  processing  through  a Rockwell  furnace.  Among  the  items 
being  destroyed  were  Charges,  M36  for  Catapult,  Aircraft  Ejection  Seat  M3 
(M36  PAD  cartridges)  and  various  small  arms  ammunition. 

The  employee  was  following  the  normal  procedure  for  disposing  M36 
cartridges,  each  of  which  contains  approximately  one-half  pound  of  stick 
propellant.  The  cartridges  were  placed  on  the  conveyor  from  within  the 
feeder  building  and  were  fed,  two  at  a time,  through  the  furnace,  along 
with  the  small  arms  ammunition.  The  procedure  calls  for  the  operator  to 
listen  for  the  detonation  report  of  the  two  M36  cartridges.  Upon  hearing 
the  detonation,  he  then  places  two  more  cartridges  on  the  conveyor  and 
repeats  the  sequence. 

On  one  occasion,  one  or  two  of  the  M36  cartridges  apparently  became 
jammed  or  wedged  in  the  conveyor  chute  close  to  the  hopper  opening.  The 
operator  continued  to  feed  the  cartridges  and  assorted  small  arms  ammuni- 
tion on  to  the  conveyor  even  though  he  did  not  hear  the  cartridge  detona- 
tion reports.  The  jammed  or  wedged  cartridges  prevented  the  succeeding 
cartridges  from  getting  by,  and  caused  a back-up  of  the  M36  cartridges  at 
this  point. 

Indications  were  that  a flame  issued  forth  from  the  furnace  and, 
fanned  by  the  wind,  engulfed  the  cartridges  on  the  chute  and  caused  them 
to  detonate.  There  were  no  injuries,  but  the  roof  above  the  furnace  and 
the  conveyor  were  damaged  and  the  chute  was  destroyed.  Total  property 
damage  was  estimated  at  $2,200.00.  The  furnace  was  not  damaged. 

The  following  precautions  are  to  be  taken  to  prevent  recurrence: 

1.  The  operator  has  been  reinstructed  to  adhere  to  proper  proce- 
dure . 

2.  A mirror  is  being  installed  to  enable  the  operator  to  observe 
the  chute  and  provide  control  for  precluding  back-up  of  cartridges  in  the 
chute . 


3.  In  the  future,  the  furnace  will  only  be  used  for  disposal  of 
small  arms  ammunition.  The  M36  and  similar  cartridges  will  be  sent  to 
another  installation  for  destruction. 
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SECURITY  PERSONNEL 
— PI  ease  take  note 


Division  of  Operational  Safety 
U.  S.  Atomic  Energy  Commission 
Washington,  D.  C.  20545 


In  early  1970,  the  U.  S.  Army  Materiel  Command  published  an  Abstract 
Report  concerning  the  electrocution  of  a security  guard. 


The  guard  was  making  a routine  patrol  in  an  explosives  storage  area 
and  observed  what  appeared  to  be  a grass  fire  in  the  distance.  He  drove 
to  the  area,  parked  his  vehicle,  and  crossed  a snow-filled  ditch  on  foot 
to  approach  the  grass  fire.  He  accidentally  contacted  a broken  electrical 
line  that  had  started  the  fire  and  was  electrocuted. 


The  U.  S.  Atomic  Energy  Commission  (AEC)  experienced  a very  similar 
incident  in  December  1971,  and  publicized  it  in  Issue  No.  326,  Serious  Ac- 
cidents, May  26,  1972,  as  follows: 


The  Incident 


An  officer  of  an  AEC  contractor  security  patrol  was  fatally  electro- 
cuted on  the  morning  of  December  5,  1971,  when  he  contacted  a downed  power 
line . 


He  and  a patrolman  were  investigating  the  source  of  flashing  lights 
reported  to  be  originating  from  some  hills  on  a government  reservation. 

The  accident  occurred  near  the  top  of  a low  mountain  ridge  that  was 
covered  with  snow,  some  drifts  as  deep  as  three  feet.  A 13.8  kv  power 
line  had  broken  during  a recent  blizzard  and  fallen  into  the  snow.  Pro- 
tective devices,  20  ampere  fuse  cutouts,  did  not  operate  due  to  the  high 
fault  (ground  resistance)  between  the  downed  wires. 

The  men  reported  by  radio  that  an  energized  power  line  was  down  and 
arcing  to  the  ground  causing  small  fires.  Although  advised  by  their  radio 
contact  to  stay  clear  of  the  wire  and  wait  for  the  public  utility  crew  to 
de-energize  the  power  line,  the  patrol  officer  returned  to  the  edge  of  the 
ridge  to  further  evaluate  the  situation.  He  evidently  slipped  on  the  snow- 
covered  rocks  and  either  slid  down  the  slope  into  the  power  line  or  in- 
stinctively grabbed  the  power  line  with  his  right  hand  in  an  attempt  to 
regain  his  balance.  When  the  patrolman  also  returned  to  the  edge  of  the 
ridge,  he  saw  the  officer  falling  down  the  slope.  The  patrolman  did  not 
see  that  the  officer  had  contacted  the  power  line,  but  did  see  that  the 
officer  was  clear  of  the  line  before  going  to  assist  him.  Attempts  to 
revive  the  officer  were  unsuccessful. 
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Action  To  Be  Taken 


This  accident  describes  a need  for  an  intensive  safety  education  and 
training  program  in  handling  emergency  situations  associated  with  down 
power  lines,  specifically  for  the  emergency  response  personnel  at  all  AEC 
sites.  Included  with  this  training  should  be  resuscitative  methods  taught 
by  professional  medical  personnel. 

The  accident  also  emphasizes  a need  to  evaluate  electric  power  sup- 
plier's monitoring  and  communication  systems  to  insure  that  fault  condi- 
tions will  be  detected  promptly  and  that  responsible  people  will  be  noti- 
fied . 

# # $ $ # 


This  real  attention-getter  was  prepared  by  Safety  Engineer  Stephen  K. 
Smurthwaite  (left)  of  the  Radiation  and  Occupational  Safety  Branch  at  the 
Army  Materials  and  Mechanics  Research  Center.  At  right  is  Sidney  Levin, 
Chief,  Radiation  and  Occupational  Safety  Branch,  who  helped  man  the 
exhibit  and  answer  questions  for  employees  entering  and  leaving  the  post 
cafeteria  during  National  Poison  Prevention  Week. 

# * # * « 
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Here  are  ten  questions  that  will  test  your  knowledge  of  safety  re- 
quirements that  you  will  need  under  different  circumstances.  Answers  to 
these  questions  may  be  found  in  the  AR  385  series,  the  AMCR  385  series  and 
the  AMC  supplements  to  the  AR  385  series.  How  many  can  you  answer  without 
referring  to  the  regulations? 

f l.J  What  are  the  requirements  for  electrical  equipment  and  wiring  used  in 
laboratories  ? 

Answer  and  reference: 

( 2 .J  What  precautions  are  to  be  followed  when  it  is  necessary  for  person- 
nel to  enter  storage  tanks? 

Answer  and  reference: 

(3.)  How  may  installations  and  activities  apply  for  National  Safety  Council 
no-injury  record  awards? 

Answer  and  reference: 

(4.)  What  publication  provides  an  acceptable  guide  for  programing  office 
safety? 

Answer  and  reference: 

f 5 .J  When  shall  personnel  be  required  to  wear  clothing  made  of  flame 
retardant  treated  fabrics? 

Answer  and  reference: 

(6 .)  What  document  outlines  safety  responsibilities  set  forth  in  the  Oc- 
cupational Safety  and  Health  Act? 


Answer  and  reference 
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What  are  the  requirements  to  be  adhered  to  when  hunting  is  permitted 
on  an  AMC  establishment? 

Answer  and  reference: 

What  are  the  requirements  for  containers  that  are  to  be  used  in  the 
transportation  of  hazardous  materials? 

Answer  and  reference: 

How  often  should  employees'  safety  committees  meet? 

Answer  and  reference: 

What  is  the  definition  of  an  Army  contractor  employee? 

Answer  and  reference : 


***** 


LESSON  IN  SAFETY 


Gene  West,  an  employee  of  Pueblo  Army  Depot,  zeroed  in  on  safety  at 
home  by  taking  the  precaution  of  wearing  safety  glasses  while  engaged  in 
his  hobby  as  a gunsmith.  The  rifle  he  was  testing  exploded,  splattering 
his  face  and  glasses  with  metal  fragments.  He  called  a photographer  who 
lived  nearby  and  had  the  above  photo  made.  Had  he  not  worn  his  safety 
glasses,  serious  injury  to  his  eyes  could  have  resulted. 
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FLASH  FIRE  INVOLVING  EXPLOSIVES 

There  is  much  effort,  time  and  money  expended  in  AMC  to  assure  that  a 
safe  environment  exists  in  all  explosives  operations.  The  design  of  the 
facility  where  the  operation  is  housed  is  the  result  of  planning  that  con- 
siders the  knowledge  gained  through  past  experience.  The  equipment  and 
machinery  for  the  production  of  explosives  items  are  critically  evaluated 
for  safety  purposes.  The  methods  employed  to  perform  the  necessary  work 
are  carefully  planned  to  include  the  controls  that  are  set  forth  in  numer- 
ous standards  for  explosives  operations.  The  testing  for  compatibility  of 
materials,  the  controls  for  electrostatic  generation,  and  fire  detection 
and  extinguishment  further  contribute  toward  the  safety  of  explosives  op- 
erations . 

With  all  of  the  restraints  imposed  on  explosives  operations,  it  ap- 
pears that  the  unexpected  could  not  happen.  To  quote  the  old  maxim, 

"Expect  the  Unexpected,"  becomes  just  so  much  verbiage  without  any  specific 
meaning.  Yet,  the  unexpected  does  occur  and  the  cause  in  many  instances 
remains  unknown. 

Advanced  technology  with  past  experience  and  research  has  taught  us  a 
great  deal  about  explosives  operations.  However,  whenever  a DA  Form  285 
is  prepared  and  the  narrative  of  an  accident  states  the  cause  is  unknown, 
it  serves  as  an  indicator  that  there  is  much  left  to  be  learned. 

For  example,  exactly  how  much  weight  or  pressure  is  necessary  to 
crush  a crystal  of  sensitive  explosive?  If  it  is  crushed,  will  it 
detonate  with  sufficient  energy  to  initiate  the  mass  with  it?  Are  these 
conditions  reproducible?  How  much  electrostatic  energy  will  be  generated 
by  moving  or  rustling  a number  of  plastic  bags?  Will  the  plastic  bags  act 
as  a capacitor  and  store  a static  charge  of  sufficient  energy  which  may 
discharge  at  a later  time  to  function  an  electric  primer  or  ignite  flam- 
mable materials?  The  exact  answers  to  these  questions  are,  of  course, 
shrouded  under  so  many  variables  that  considering  the  same  circumstances 
of  a given  situation,  the  answer  may  only  be  an  assumption. 
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The  following  narrative  is  extracted  in  part  from  a DA  Form  285. 
It  further  emphasizes  the  point  that  we  do  not,  at  this  time,  have  a 
solution  for  all  the  problems  nor  have  we  found  answers  for  all  the 
causes  of  explosives  accidents.  Photo  1 shows  an  overall  view  of  the 
general  work  area  where  the  incident  occurred. 


Photo  1 


A skid  rack  containing  24  152mm  XM409E  (caseless  ammunition)  com- 
plete rounds  had  been  brought  into  a work  bay  from  an  oven  bay  where 
the  rounds  had  been  heated  to  120°F. 


Two  production  operators  were  preparing  to  install  elastomeric  bags 
over  the  cartridge  cases.  Twenty  elastomeric  bags  were  being  dumped  from 
two  plastic  bags  onto  the  top  of  the  cartridge  cases.  One  operator  was 
distributing  the  elastomeric  bags  on  top  of  the  shells  on  the  skid  when  a 
loud  "pop"  was  heard  and  a flash  fire  occurred. 

Both  employees  were  wearing  conductive  shoes  and  were  standing  on 
grounded  plates  when  the  incident  occurred.  Two  employees  were  burned 
about  the  face  and  hands  from  the  fire.  They  were  treated  at  first  aid 
and  no  time  was  lost  from  work  as  a result  of  the  incident. 
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Photo2 


The  fire  resulted  in  total  or 
partial  burn  of  72  complete  rounds. 
Photo  2 shows  a close-up  view  of  the 
skid  of  cartridges  where  the  fire 
originated . 

The  fire  activated  sprinkler 
heads  in  the  work  bay  and  adjoining 
bays  and  the  fire  was  extinguished. 
There  was  no  explosion. 

The  cause  of  the  accident  was 
unknown . 


Several  probable  causes  were  investigated  without  positive  determina- 
tion of  the  cause.  Two  possible  causes  were  selected  as  being  the  most 
likely  to  have  caused  the  flash  fire. 

1.  The  electrical  ignition  element  contains  an  ignition  charge 
made  up  of  potassium  chlorate,  lead  thiocynate,  charcoal  and  lacquer.  If 
some  of  this  material  flaked  off  into  the  area  between  the  igniter  element 
and  cartridge  case  base,  and  _if  the  ignition  element  was  not  fastened 
securely  to  the  cartridge  case,  the  downward  pressure  on  the  ignition  ele- 
ment (caused  by  the  weight  of  the  bags  or  pressure  exerted  by  an  operator) 
could  pinch  the  ignition  charge  material  causing  it  to  ignite. 

2.  The  adhesive  that  holds  the  ignition  element  in  the  cartridge 
case  may  have  been  ignited  by  static  electricity.  The  adhesive  contains 
some  M-8  propellant  which  is  43  per  cent  nitroglycerin. 

Corrective  action  to  preclude  future  incidents  from  either  of  the 
possible  causes  cited  is  as  follows: 

1.  The  elastomeric  bags  will  not  be  placed  on  152mm  XM409E6 
rounds  while  the  rounds  are  in  a rack  or  a skid.  The  bags  will  be  placed 
over  the  cartridge  case  at  a mandrel  designed  for  this  purpose.  The 
mandrel  is  grounded. 

2.  The  elastomeric  bags  will  be  removed  from  the  plastic  con- 
tainer bags  at  a separate  location  where  the  work  surface  is  conductive 
and  grounded . 

What  is  learned  from  this  accident  experience?  The  most  we  have 
learned  is  that  we  do  not  know  the  exact  cause  and  we  may  never  know.  We 
have  learned  again  to  "expect  the  unexpected"  because  the  unexpected  did 
occur . 


>>  # « $ * 
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SENSOR  PROVIDES  SAFETY 


Julian  L.  Vann,  Chief  Safety  Engineer 
Harvey  Aluminum  Sales,  Inc. 

Milan  Army  Ammunition  Plant 


For  many  years  there  had  been  little  improvement  in  the  feeding  of 
rotary  pelleting  presses  at  Milan  Army  Ammunition  Plant.  Due  to  the  large 
quantities  of  explosives  required  to  feed  the  presses,  special  bucket-type 
conveyors  were  used.  The  buckets  were  filled  and  placed  on  the  conveyor 
by  an  operator  from  behind  a protective  wall.  The  buckets  were  conveyed 
into  the  pressing  cubicle  and  dumped  mechanically  into  the  press  hopper. 

To  eliminate  the  spillage  of  explosives,  the  hoppers  were  large  and  when 
filled  to  capacity  would  more  than  double  the  maximum  explosives  limits. 
Maintaining  the  allowable  quantities  of  explosives  was  entirely  dependent 
upon  the  operator  who  loaded  the  conveyor.  Red  lines  were  placed  on  the 
inside  of  the  hopper  which  the  operator  used  to  measure  the  quantities  of 
explosives  within  the  hopper.  The  inside  of  the  hopper  was  viewed 
through  "peek"  holes  or  by  the  use  of  offset  mirrors.  This  method  of 
maintaining  the  allowable  quantities  of  explosives  within  the  press 
cubicle  was  never  satisfactory  since  it  required  100  per  cent  attention 
from  the  operator. 

A supervisor  in  the  Safety  Department  became  very  concerned  when  a 
survey  proved  that  this  method  could  not  be  depended  upon  to  prevent  the 
hoppers  from  being  overfilled  to  the  extent  that  explosives  would  spill 
onto  the  machine  and  the  cubicle  floor.  He  then  began  to  explore  the 
possibility  of  using  mechanical  or  electronic  devices  to  positively  con- 
trol the  level  of  explosives  within  the  hopper  by  starting  and  stopping 
the  feed  conveyor  at  the  proper  time.  He  remembered  a sensoring  device 
which  had  been  discarded  years  ago.  This  device  operated  on  radio  fre- 
quency waves  and  was  designed  to  control  the  level  of  liquids  within  tanks. 

After  consultation  with  the  Engineering  Department,  it  was  decided  to 
erect  a mock  conveyor  and  experiment  with  the  device  in  controlling  the 
level  of  explosives  within  pelleting  press  hoppers. 

Mr.  Blake  Mayo,  electrician,  not  only  adapted  the  sensor  to  perform 
this  function,  but  incorporated  a timing  device  which  would  allow  the  con- 
veyor bucket  to  dump  into  the  hopper  and  pass  beyond  before  the  conveyor 
stopped.  The  timing  device  also  prevented  filled  buckets  of  explosives 
from  inadvertently  entering  the  press  cubicle. 

When  this  sensoring  device  was  installed  over  the  hopper  of  the 
pelleting  press,  the  operator  no  longer  had  to  worry  about  the  hopper 
being  overfilled  or  underfilled.  There  was  no  need  for  "peek"  holes 
or  mirrors  since  the  conveyor  would  start  and  stop  automatically  as 
required  to  maintain  a level  of  ten  to  fifteen  pounds  of  explosives 
within  the  press  cubicle. 
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SENSOR  (LOOKING  DOWN  INTO  HOPPER  ) 


The  electrical  mechanisms  controlling  the  sensor  are  inclosed  and 
located  outside  the  press  cubicle.  The  current  to  the  sensor  head  is 
minute.  A short  circuit  should  not  produce  a spark  of  heat  sufficient 
to  cause  explosives  to  function. 


In  the  near  future,  Milan  Army  Ammunition  Plant  will  have  these 
sensors  on  all  rotary  presses  fed  by  bucket  conveyors.  Once  again,  an 
employee's  suggestion  has  afforded  a safer,  more  efficient  munitions  opera- 
tion. 


# # » # # 
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Here  are  the  answers  to  the  questions  on  pages  21  and  22.  A refer- 
ence to  the  pertinent  regulation  and  paragraph  follows  each  answer. 


( 1 . J All  laboratory  wiring  should  be  of  the  three-wire  type.  Electrical 
wiring  and  equipment  and  their  installation  shall  be  in  accordance 
with  the  National  Electrical  Code  and  shall  be  approved  for  the 
particular  hazards  present.  Cords  to  all  electrical  apparatus  should 
have  acid-proof  and  water-proof  insulation.  Repairs  and  maintenance 
on  electrical  equipment  and  wiring  shall  be  performed  only  by  quali- 
fied personnel.  Reference  paragraph  4-9,  AMCR  385-100. 

f 2 .)  Precautions  such  as,  but  not  restricted  to,  those  listed  below  are 
intended  to  offset  the  hazards  encountered  in  entering  tanks. 

a.  The  tank  should  be  thoroughly  cleaned  and  purged  of  toxic, 
flammable  or  otherwise  harmful  gases,  vapors,  dusts,  fumes,  etc., 
prior  to  entry. 

b.  The  tank  should  be  provided  with  special  ventilation  by  means  of 
forced  air  from  an  uncontaminated  source. 

c.  One  man,  on  the  outside  of  the  tank,  shall  keep  the  person  in  the 
tank  under  observation  and  at  least  one  additional  man  shall  be 
available  for  rescue  work  should  the  person  in  the  tank  be  overcome. 
Men  performing  such  duties  shall  be  properly  trained  to  perform  tank 
rescue  work.  Additional  personnel  with  such  training  should  be  avail- 
able . 

d.  Personnel  entering  tanks  shall  be  equipped  with  suitable  respira- 
tory protective  equipment,  lifebelts  or  harnesses  and  lifelines. 

Reference  paragraphs  9-32a  through  d,  AMCR  385-100. 
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( 3 . J Applications  by  AMC  Government - owned , Government-operated  (GOGO)  in- 
stallations  and  activities  for  National  Safety  Council  no-injury  rec- 
ord awards  must  be  forwarded  through  command  channels  to  the  Director, 
AMC  Field  Safety  Agency  (to  verify  records  and  assure  that  the  in- 
stallation or  activity  has  applied  for  the  award  under  the  proper 
industrial  grouping  as  shown  in  National  Safety  Council  Accident 
Facts).  The  Director,  AMC  Field  Safety  Agency  will  forward  the  appli- 
cation to  the  Commanding  General,  AMC,  ATTN:  AMCSF.  Processing  must 

be  completed  within  60  days  after  the  completion  date  of  the  record 
achievements.  Applications  for  these  awards  will  be  submitted  on  the 
National  Safety  Council  "Report  of  No- Injury  Record"  Form  (obtainable 
from  the  AMC  Field  Safety  Agency) . Requirements  are  given  in  the 
National  Safety  Council  "Award  Plan  for  Recognizing  Good  Industrial 
Records"  as  revised  1 January  1966.  Reference  Page  6-1,  paragraph 
6- lb (6) , AMC  Suppl  1 to  AR  385-10.  ' ~ 

Safe  Practices  Pamphlet  No.  108,  Office  Safety,  National  Safety 
^ / Council,  is  acceptable  as  a guide  for  programing  office  safety 
Reference  paragraph  9-38,  AMCR  385-100. 


Clothing  made  of  flame  retardant  treated  fabrics  shall  be  used  by 


personnel  working  in  buildings  or  operations  where  there  is  exposure 
to  open  flames,  the  possibility  of  flash  fires,  or  the  possibility 
exists  of  contaminating  clothing  with  materials  that  could  flash. 
Reference  paragraph  10-7a,  AMCR  385-100. 

(6 . J Executive  Order  11612,  dated  26  July  197 1. interprets  and  delineates 
safety  responsibilities  of  Federal  agencies  set  forth  in  the  Occupa- 
tional Safety  and  Health  Act  which  became  law  on  29  December  1970. 
Reference  paragraph  l-9a,  AR  385-10. 

( 7 . ) Hunting  is  authorized  in  an  establishment  under  carefully  controlled 
conditions  that  will  not  endanger  life,  property  or  hazardous  mate- 
rials providing  the  following  requirements  are  rigidly  observed: 

a.  Written  permits  will  be  issued  to  each  individual  authorized  to 
hunt . 

b.  A map  shall  be  prepared  to  clearly  define  hunting  and  no  hunting 
areas,  and  a copy  issued  to  each  hunter.  Each  hunter  must  become 
thoroughly  familiar  with  the  respective  areas  prior  to  hunting. 

c.  Rifles,  shotguns,  and  low  and  arrows  are  approved  for  hunting; 
however,  cartridges  having  a muzzle  velocity  greater  than  2300  feet 
per  second  shall  not  be  used  within  an  establishment  containing  ex- 
plosive materials. 

d.  Hunting  with  shotguns  and  rifles  is  prohibited  within  1200  feet 
of  aboveground  magazines,  outdoor  ammunition  storage  locations,  work- 
shops, or  other  aboveground  ammunition  facilities. 
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e.  In  igloo  areas,  the  direction  of  fire  will  be  toward  the  rear  of 
igloo  magazines.  Weapons  will  not  be  fired  in  the  direction  of  igloo 
doors . 

f.  Personnel  permitted  to  hunt  in  magazine  areas  shall  be  restricted 
to  assigned  military  personnel,  installation  employees  and  other 
selected  personnel  as  may  be  specifically  authorized  by  the  installa- 
tion commander. 

g.  All  hunting  shall  conform  to  all  applicable  State  and  Federal 
regulations . 

Reference  paragraph  16-3,  AMCR  385-100. 

Hazardous  materials  in  bulk  or  liquid  form  must  be  transported  in 
containers  which  will  prevent  leakage.  Containers  used  in  intraplant 
transportation  and  service  storage  of  explosives  and  explosive  mix- 
tures such  as  initiating  explosives,  pyrotechnic  compositions  and 
tracer  materials  should  be  made  of  material  in  the  following  prefer- 
ence order: 

Conductive  rubber 

Nonferrous  metal-lined  boxes  without  seams  or  rivet  heads  under 
which  explosive  dust  can  accumulate 

Plastics  (conductive  type  only) 

Paper- lined  wood  boxes 

Fiber  containers . 

Fiber  containers  of  bulk  explosives  and  propellants  should  be  shipped 
only  by  motor  carrier  or  trailer-on-flat  car.  Glass  containers  should 
not  be  used  because  of  their  fragility  and  severe  missile  hazard. 

Reference  paragraph  20-4,  AMCR  385-100. 

j 

Employees'  safety  committees  should  hold  regular  meetings  at  least 
once  each  month  in  order  that  all  personnel  may  participate  in  the 
safety  program  of  the  installation.  Reference  paragraph  l-13a,  AMCR 
385-100, 

Army  contractor  employees  are  employees  of  a contractor  engaged  in 
gainful  employment  in  an  activity  or  operation  of  the  Army,  or  on  an 
Army  installation,  including  technical  representatives  of  contractors. 
Reference  paragraph  2-4g,  AR  385-40. 
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